Merge branch 'main' into make-parser-public

Author: laeubi

.github/renovate.json

@@ -1,6 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "github>cucumber/renovate-config"
+    "github>cucumber/renovate-config",
+    ":enablePreCommit"
   ]
 }

.github/workflows/release-github.yaml

@@ -12,7 +12,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: cucumber/action-create-github-release@v1.1.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-mvn.yml

@@ -10,16 +10,16 @@ jobs:
     runs-on: ubuntu-latest
     environment: Release
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-java@v5
         with:
           distribution: 'temurin'
-          java-version: '11'
+          java-version: '17'
           cache: 'maven'
       - uses: cucumber/action-publish-mvn@v3.0.0
         with:
           gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
           gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          nexus-username: cukebot
+          nexus-username: ${{ secrets.SONATYPE_USERNAME }}
           nexus-password: ${{ secrets.SONATYPE_PASSWORD }}
           working-directory: java

.github/workflows/release-npm.yml

@@ -4,21 +4,24 @@ on:
   push:
     branches: [release/*]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish-npm:
     name: Publish NPM module
     runs-on: ubuntu-latest
     environment: Release
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '22.x'
+          node-version: '24.x'
           cache: 'npm'
           cache-dependency-path: javascript/package-lock.json
-      - run: npm install-test
+          registry-url: 'https://registry.npmjs.org'
+      - run: npm install-ci-test
+        working-directory: javascript
+      - run: npm publish
         working-directory: javascript
-      - uses: cucumber/action-publish-npm@v1.1.1
-        with:
-          npm-token: ${{ secrets.NPM_TOKEN }}
-          working-directory: javascript

.github/workflows/release-nuget.yaml

@@ -11,11 +11,11 @@ jobs:
     runs-on: ubuntu-latest
     environment: Release
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: 6.0.x
+          dotnet-version: 8.0.x
       - uses: cucumber/action-publish-nuget@v1.0.0
         with:
           nuget-api-key: ${{ secrets.NUGET_API_KEY }}

.github/workflows/release-pypi.yaml

@@ -2,11 +2,11 @@ name: Release Python
 
 on:
   push:
-    branches: [ release/* ]
+    branches: [release/*]
 
 jobs:
-  release:
-    name: Release
+  publish-pypi:
+    name: Publish PyPI Package
     runs-on: ubuntu-latest
     environment: Release
     permissions:
@@ -15,23 +15,17 @@ jobs:
       run:
         working-directory: python
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-      - name: Set up Python 3.10
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.13"
+      - uses: actions/checkout@v5
 
-      - name: Show Python version
-        run: python --version
+      - name: Install uv and set the python version
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          python-version: "3.14"
+          version: "0.9.7"
 
       - name: Build package
-        run: |
-          python -m pip install build twine
-          python -m build
-          twine check --strict dist/*
+        run: uv build
 
-      - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          packages-dir: python/dist
+      - name: Publish package
+        run: uv publish

.github/workflows/release-rubygem.yml

@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
     environment: Release
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.3'
+          ruby-version: '3.4.7'
           bundler-cache: true
       - uses: cucumber/action-publish-rubygem@v1.0.0
         with:

.github/workflows/stryker-javascript.yml

@@ -12,8 +12,8 @@ jobs:
   stryker:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-node@v4
+    - uses: actions/checkout@v5
+    - uses: actions/setup-node@v6
       with:
         node-version: '22'
         cache: 'npm'

.github/workflows/test-dotnet.yml

@@ -14,11 +14,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
-          dotnet-version: 6.0.x
+          dotnet-version: |
+            8.0.x
+            9.0.x
       - name: Restore dependencies
         run: dotnet restore
         working-directory: dotnet

.github/workflows/test-go.yml

@@ -25,11 +25,12 @@ jobs:
             go: '1.18.x'
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: ${{ matrix.go }}
+        cache-dependency-path: go/go.sum
     - name: lint
       working-directory: go
       run: gofmt -w .